Home / API

The node, documented.

Everything the capture node knows is served from this domain: the format, the verifier, the keys, and the live records themselves. No accounts, no API keys, no rate cards: it is a read-only public surface with open CORS, because evidence that hides behind a login is worth less. Every endpoint below runs live from this page.

Read the spec Download the verifier See the live records

01 · Endpoints

Eight endpoints. Try each one from here.

GET /api/v0/

The index: service description and the endpoint map. Machines get JSON; a browser lands on this page.

curl https://lentra.io/api/v0/

GET /api/v0/spec

The passport format specification, v0.1, as markdown. The canonical copy of the format lives at this URL.

curl https://lentra.io/api/v0/spec

GET /api/v0/verifier.mjs

The reference verifier: one file, zero dependencies, Node 18+. Library exports plus a CLI. Exit code 0 means the signature held.

curl https://lentra.io/api/v0/verifier.mjs

GET /api/v0/keys

The issuer key registry: every key that ever signed records for this site, retired keys included, demo keys labelled.

curl https://lentra.io/api/v0/keys

GET /api/v0/records/recent?n=50

Recent machine visits. Forward-confirmed visitors as full signed records; unverified visitors as masked summaries. n up to 200.

curl https://lentra.io/api/v0/records/recent

GET /api/v0/records/stats

Aggregates: chain position, capture counters, claimed agents ranked by volume with their verification share.

curl https://lentra.io/api/v0/records/stats

GET /api/v0/records/head

The current chain head: sequence and digest. Pin this anywhere durable and the node's history is pinned for you. That is public witnessing, and you do not need our permission.

curl https://lentra.io/api/v0/records/head

POST /api/v0/verify

Verify any passport JSON against the published keys, server-side. The same check the reference verifier runs locally; use whichever trust posture suits you.

curl -X POST -H 'content-type: application/json' --data @record.json https://lentra.io/api/v0/verify

02 · Verify, live

Paste a passport. The node answers.

Prefilled with this site's specimen record. Send it as-is for a valid verdict, break one character for an invalid one. The same request works from curl, and the same check runs offline with the downloaded verifier.

{
  "passport_version": "0.1",
  "id": "lp_01J9AC5K8Q2RD7MW4XE1VBT6HN",
  "issuer": {
    "name": "LENTRA",
    "key_id": "lentra-demo-2026-08"
  },
  "claims": {
    "source": {
      "claimed_agent": "ExampleBot/2.4 (+https://ai.example.com/bot)",
      "peer_ip": "198.51.100.23",
      "peer_asn": "AS64511",
      "reverse_dns": "none",
      "forward_confirmed": false
    },
    "observation": {
      "observed_at": "2026-08-19T09:14:52.104Z",
      "observed_at_source": "roughtime+ntp-consensus",
      "capture_point": "edge_mirror",
      "duration_ms": 63
    },
    "method": {
      "transport": "https_get",
      "capture": "passive_mirror",
      "interference": "none",
      "site": "daily-ledger.example"
    },
    "context": {
      "requested_url": "https://daily-ledger.example/analysis/2026-08-19/rates",
      "robots_txt_sha256": "sha256:5b0e…77c1",
      "robots_state": "disallowed_for_agent",
      "license_signals": [
        "rsl:v1",
        "tdm-reservation"
      ]
    },
    "quality": {
      "http_status": 200,
      "content_sha256": "sha256:c9d4…12aa",
      "content_bytes": 48211,
      "response": "served",
      "anomalies": [
        "agent_network_mismatch"
      ]
    },
    "rights": {
      "basis": "publisher_terms",
      "terms_url": "https://daily-ledger.example/terms",
      "terms_sha256": "sha256:7a19…0f55",
      "reserved": [
        "tdm",
        "model_training"
      ],
      "jurisdiction": "EU"
    }
  },
  "chain": {
    "seq": 51402,
    "prev": "sha256:aa03…4f6d"
  },
  "signature": {
    "alg": "ed25519",
    "key_id": "lentra-demo-2026-08",
    "value": "PzppiIltEetr9BXf09qSohp6qkE/9GPdYRsPkFuSH+665jQptbIYKoNiZ2L+Ppl0WNjR/X9HXKGkuLlfJNVJAQ=="
  }
}

The verdict will appear here.

03 · The contract

What this surface promises.

Read-only and open

GET everywhere except /verify, CORS open, no state changed by anything you send. The node records its edge, not its API callers.

Stable under versioning

The /v0/ prefix is the envelope. Fields may be added inside responses; meanings never change under a name. Breaking changes arrive as /v1/, and /v0/ keeps answering.

Honest about status

This is a v0 prototype node: capture by access log tail, no heartbeats, no qualified countersignatures yet. The records say so themselves, in their method group.

How the node works From chain to exhibit